QwikSec

Security Database

CVE

CWE

Training

CVE-2022-1946

Published: Jul 4, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

The Gallery WordPress plugin before 2.0.0 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting issue

Vendor	Product	Versions
Unknown	Gallery – Image and Video Gallery with Thumbnails	affected `2.0.0 - < 2.0.0`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/0903920c-be2e-4515-901f-87253eb30940

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.